Out of memory (oom_kill_allocating_task): Kill process 7962 (syz-fuzzer) score 0 or sacrifice child Killed process 22303 (syz-executor.4) total-vm:48512kB, anon-rss:2476kB, file-rss:0kB, shmem-rss:0kB oom_reaper: reaped process 22303 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 Bluetooth: hci1 command 0x0409 tx timeout Bluetooth: hci1 command 0x041b tx timeout Bluetooth: hci5 command 0x0409 tx timeout oom_reaper: reaped process 22339 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:28kB systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 systemd-journal cpuset=/ mems_allowed=0-1 CPU: 0 PID: 22252 Comm: systemd-journal Not tainted 4.14.304-syzkaller #0 syz-executor.1: Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 Call Trace: page allocation failure: order:0 __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 dump_header+0x178/0x82f mm/oom_kill.c:424 oom_kill_process.cold+0x10/0xa40 mm/oom_kill.c:863 , mode:0x14000c0(GFP_KERNEL), nodemask= out_of_memory+0xe3e/0x1190 mm/oom_kill.c:1075 (null) __alloc_pages_may_oom mm/page_alloc.c:3351 [inline] __alloc_pages_slowpath mm/page_alloc.c:4070 [inline] __alloc_pages_nodemask+0x25a9/0x2900 mm/page_alloc.c:4239 alloc_pages_current+0x155/0x260 mm/mempolicy.c:2107 alloc_pages include/linux/gfp.h:520 [inline] __page_cache_alloc mm/filemap.c:871 [inline] page_cache_read mm/filemap.c:2296 [inline] filemap_fault+0x11a1/0x1ad0 mm/filemap.c:2480 ext4_filemap_fault+0x84/0xb0 fs/ext4/inode.c:6310 syz-executor.1 cpuset= __do_fault+0xfa/0x380 mm/memory.c:3344 do_read_fault mm/memory.c:3759 [inline] do_fault mm/memory.c:3885 [inline] handle_pte_fault mm/memory.c:4115 [inline] __handle_mm_fault+0x2497/0x4620 mm/memory.c:4239 handle_mm_fault+0x455/0x9c0 mm/memory.c:4276 __do_page_fault+0x549/0xad0 arch/x86/mm/fault.c:1442 page_fault+0x45/0x50 arch/x86/entry/entry_64.S:1126 RIP: 0001:0xffffffffffffffff / RSP: bbbeb1e0:00007fffe5412130 EFLAGS: 7fffe5411f40 mems_allowed=0-1 Mem-Info: CPU: 1 PID: 22339 Comm: syz-executor.1 Not tainted 4.14.304-syzkaller #0 active_anon:16850 inactive_anon:14860 isolated_anon:0 active_file:6 inactive_file:17 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:29376 slab_unreclaimable:97783 mapped:22156 shmem:17440 pagetables:582 bounce:0 free:13928 free_pcp:615 free_cma:0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 Node 0 active_anon:64488kB inactive_anon:43108kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72748kB dirty:0kB writeback:0kB shmem:53360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Call Trace: Node 1 active_anon:2912kB inactive_anon:16332kB active_file:0kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:15876kB dirty:0kB writeback:0kB shmem:16400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 warn_alloc.cold+0x96/0x1cc mm/page_alloc.c:3255 Node 0 __alloc_pages_slowpath mm/page_alloc.c:4136 [inline] __alloc_pages_nodemask+0x23d0/0x2900 mm/page_alloc.c:4239 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2717 2718 alloc_pages_current+0x155/0x260 mm/mempolicy.c:2107 2718 alloc_pages include/linux/gfp.h:520 [inline] relay_alloc_buf kernel/relay.c:136 [inline] relay_create_buf kernel/relay.c:176 [inline] relay_open_buf.part.0+0x236/0xa00 kernel/relay.c:452 2718 relay_open_buf kernel/relay.c:449 [inline] relay_open kernel/relay.c:604 [inline] relay_open+0x4ec/0x980 kernel/relay.c:563 do_blk_trace_setup+0x4ba/0xac0 kernel/trace/blktrace.c:578 __blk_trace_setup+0xa3/0x120 kernel/trace/blktrace.c:621 Node 0 DMA32 free:17996kB min:36196kB low:45244kB high:54292kB active_anon:64488kB inactive_anon:43108kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7136kB pagetables:1928kB bounce:0kB free_pcp:1040kB local_pcp:220kB free_cma:0kB blk_trace_ioctl+0x136/0x250 kernel/trace/blktrace.c:762 lowmem_reserve[]: blkdev_ioctl+0xec/0x1830 block/ioctl.c:580 0 0 0 0 0 block_ioctl+0xd9/0x120 fs/block_dev.c:1893 vfs_ioctl fs/ioctl.c:46 [inline] file_ioctl fs/ioctl.c:500 [inline] do_vfs_ioctl+0x75a/0xff0 fs/ioctl.c:684 Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 SYSC_ioctl fs/ioctl.c:701 [inline] SyS_ioctl+0x7f/0xb0 fs/ioctl.c:692 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 0 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 0 RIP: 0033:0x7f686d6410c9 RSP: 002b:00007f686bbb3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f686d760f80 RCX: 00007f686d6410c9 RDX: 0000000020000140 RSI: 00000000c0481273 RDI: 0000000000000003 RBP: 00007f686d69cae9 R08: 0000000000000000 R09: 0000000000000000 0 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdee71580f R14: 00007f686bbb3300 R15: 0000000000022000 Mem-Info: active_anon:16850 inactive_anon:14860 isolated_anon:0 active_file:11 inactive_file:12 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:29341 slab_unreclaimable:97757 mapped:22156 shmem:17440 pagetables:582 bounce:0 free:14035 free_pcp:581 free_cma:0 Node 1 Node 0 active_anon:64488kB inactive_anon:43108kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72748kB dirty:0kB writeback:0kB shmem:53360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:2912kB inactive_anon:16332kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:400kB bounce:0kB free_pcp:1420kB local_pcp:624kB free_cma:0kB Node 1 active_anon:2912kB inactive_anon:16332kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:15876kB dirty:0kB writeback:0kB shmem:16400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes lowmem_reserve[]: Node 0 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 0 lowmem_reserve[]: 0 0 0 0 2717 2718 Node 0 2718 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB 2718 (M) 2*4096kB Node 0 (M) DMA32 free:18424kB min:36196kB low:45244kB high:54292kB active_anon:64488kB inactive_anon:43108kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7136kB pagetables:1928kB bounce:0kB free_pcp:904kB local_pcp:636kB free_cma:0kB = 10968kB lowmem_reserve[]: Node 0 0 DMA32: 0 3234*4kB 0 (UME) 0 603*8kB 0 (UME) 44*16kB Node 0 (UME) Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 0*32kB lowmem_reserve[]: 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18464kB Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0 0*512kB 0 0*1024kB 0 0*2048kB 0 0*4096kB 0 = 0kB Node 1 Normal: 149*4kB (ME) 111*8kB (UM) 91*16kB (UM) 70*32kB (UME) 43*64kB (ME) 25*128kB (UME) 11*256kB (ME) 7*512kB (M) 5*1024kB (UME) 2*2048kB (M) 0*4096kB = 26748kB Node 1 Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:2912kB inactive_anon:16332kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:400kB bounce:0kB free_pcp:1420kB local_pcp:796kB free_cma:0kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB lowmem_reserve[]: 0 0 0 0 0 Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 17463 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 2097051 pages RAM 0 pages HighMem/MovableOnly 363897 pages reserved 0 pages cma reserved Out of memory (oom_kill_allocating_task): Kill process 22252 (systemd-journal) score 0 or sacrifice child Killed process 22252 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:4kB, shmem-rss:1512kB DMA: oom_reaper: reaped process 22252 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1512kB 0*4kB kworker/u4:5 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask= 1*8kB (null) (U) , order=3, oom_score_adj=0 1*16kB kworker/u4:5 cpuset= (U) / mems_allowed=0-1 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB CPU: 0 PID: 20130 Comm: kworker/u4:5 Not tainted 4.14.304-syzkaller #0 Node 0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 Workqueue: events_unbound call_usermodehelper_exec_work Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 dump_header+0x178/0x82f mm/oom_kill.c:424 DMA32: oom_kill_process.cold+0x10/0xa40 mm/oom_kill.c:863 out_of_memory+0x2dc/0x1190 mm/oom_kill.c:1086 __alloc_pages_may_oom mm/page_alloc.c:3351 [inline] __alloc_pages_slowpath mm/page_alloc.c:4070 [inline] __alloc_pages_nodemask+0x25a9/0x2900 mm/page_alloc.c:4239 3421*4kB (UME) __alloc_pages include/linux/gfp.h:484 [inline] __alloc_pages_node include/linux/gfp.h:497 [inline] alloc_pages_node include/linux/gfp.h:511 [inline] alloc_thread_stack_node kernel/fork.c:236 [inline] dup_task_struct kernel/fork.c:519 [inline] copy_process.part.0+0x265/0x71c0 kernel/fork.c:1631 607*8kB copy_process kernel/fork.c:1606 [inline] _do_fork+0x184/0xc80 kernel/fork.c:2092 (UME) kernel_thread+0x2f/0x40 kernel/fork.c:2154 46*16kB call_usermodehelper_exec_work kernel/umh.c:192 [inline] call_usermodehelper_exec_work+0x1ac/0x2a0 kernel/umh.c:178 (UME) 1*32kB (U) process_one_work+0x793/0x14a0 kernel/workqueue.c:2117 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2251 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:406 Bluetooth: hci1 command 0x040f tx timeout 1*64kB Mem-Info: (U) active_anon:16750 inactive_anon:14860 isolated_anon:0 active_file:11 inactive_file:12 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:29341 slab_unreclaimable:97757 mapped:21781 shmem:17440 pagetables:582 bounce:0 free:14686 free_pcp:30 free_cma:0 0*128kB Node 0 active_anon:64488kB inactive_anon:43108kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72748kB dirty:0kB writeback:0kB shmem:53360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 0*256kB Node 1 active_anon:2512kB inactive_anon:16332kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14376kB dirty:0kB writeback:0kB shmem:16400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 0 0*512kB DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 0*1024kB lowmem_reserve[]: 0 2717 2718 2718 2718 Node 0 DMA32 free:19224kB min:36196kB low:45244kB high:54292kB active_anon:64488kB inactive_anon:43108kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2787984kB mlocked:0kB kernel_stack:7136kB pagetables:1928kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:468kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 0*2048kB lowmem_reserve[]: 0*4096kB = 19372kB 0 Node 0 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB Node 1 Normal: 112*4kB (ME) 0 103*8kB 0 (M) 74*16kB (UM) 71*32kB (UME) 42*64kB (ME) 20*128kB (ME) 17*256kB (UME) 6*512kB (M) 5*1024kB (UME) 3*2048kB (M) 0*4096kB = 28664kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 17463 total pagecache pages 0 pages in swap cache 0 Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 2097051 pages RAM 0 pages HighMem/MovableOnly 363897 pages reserved 0 pages cma reserved Bluetooth: hci5 command 0x041b tx timeout Node 1 systemd[1]: systemd-journald.service: Failed with result 'signal'. Normal free:361984kB min:53696kB low:67120kB high:80544kB active_anon:2452kB inactive_anon:16328kB active_file:20kB inactive_file:4520kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:304kB bounce:0kB free_pcp:748kB local_pcp:116kB free_cma:0kB systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. lowmem_reserve[]: systemd[1]: Stopped Flush Journal to Persistent Storage. 0 0 0 0 0 Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10968kB systemd[1]: Stopping Flush Journal to Persistent Storage... Node 0 DMA32: 3390*4kB (UME) 934*8kB (UME) 46*16kB (UME) 1*32kB (U) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 21864kB systemd[1]: Stopped Journal Service. Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB Node 1 Normal: 10*4kB (UM) 2*8kB (UM) 4*16kB (UM) 2*32kB (UE) 45*64kB (UME) 28*128kB (UME) 25*256kB (UME) 15*512kB (UM) 14*1024kB (UME) 11*2048kB (UM) 103*4096kB (U) = 479480kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB systemd[1]: Starting Journal Service... Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 18647 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 2097051 pages RAM 0 pages HighMem/MovableOnly 363897 pages reserved 0 pages cma reserved Out of memory: Kill process 7956 (syz-fuzzer) score 6 or sacrifice child Killed process 22341 (syz-executor.0) total-vm:48512kB, anon-rss:440kB, file-rss:12292kB, shmem-rss:0kB oom_reaper: reaped process 22341 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB systemd-journald[22351]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. systemd[1]: Started Journal Service. Bluetooth: hci1 command 0x0419 tx timeout